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INTRODUCTION 

Many aircraft accidents/incidents investigations cite crew error as a causal factor (Boeing Commercial Airplane 
Group 1996). Human factors experts suggest that crew error has many underlying causes and should be the shut of 
[in accident investigation and not the end. One of those causes, the flight deck design, is correctable. If a flight deck 
design does not accommodate the human’s unique abilities and deficits, crew error may simply be the manifestation 
of this mismatch. Pilots repeatedly report that they are ‘behind the aircraft’, i.e., they do not know what the 
automated aircraft is doing or how the aircraft is doing it until after the fact (Wiener 1989, Rudisill 1994). Billings 
(1991) promotes the concept of ‘human-centered automation;’ calling on designers to allocate appropriate control and 
information to the human. However, there is much ambiguity regarding what it means to be human-centered. What 
often are labeled as ‘human-centered designs’ are actually designs where a human factors expert has been involved in 
the design process or designs where tests have shown that humans can operate them. While such designs may be 
excellent, they do not represent designs that are systematically produced according to some set of prescribed methods 
mid procedures. 

This paper describes a design concept, called Wings, that offers a clearer definition for human-centered design. 
This new design concept is radically different from current design processes in that the design begins with the human 
and uses the human body as a metaphor for designing the aircraft. This is not because the human is the most 
important part of the aircraft (certainly the aircraft would be useless without lift and thrust), but because he is the 
least understood, the least programmable, and one of the more critical elements. The Wings design concept has three 
properties: a reversal in the design process, from aerody mimics-, structures-, mid propulsion-centered to truly human- 
centered; a design metaphor that guides function allocation and control and display design; mid a deliberate distinction 
between two fundamental functions of design, to complement and to interpret human performance. The 
complementary function extends the human’s capabilities beyond his or her current limitations — this includes 
sensing, computation, memory, physical force, and human decision making styles and skills. The interpretive (or 
hermeneutic, Hollnagel 1991) function translates information, functionality, mid commands between the human and 
the aircraft. The Wings design concept allows the human to remain aware of the aircraft through natural 
interpretation. It also affords great improvements in system performance by maximizing die human’s natural 
abilities and complementing the human’s skills in a natural way. This paper will discuss the Wings design concept 
by describing die reversal in the traditional design process, die function allocation strategy of Wings, and die 
functions of complementing and interpreting the human. 


THE DESIGN PROCESS: HUMAN-CENTERED AIRCRAFT DESIGN 

The traditional approach to aircraft design (Figure 1) is to first define the mission requirements (Palmer, et. al. 
1995). These requirements are used to develop the aircraft operational requirements, which are dien used to develop 
die aircraft functional requirements. The operational mid functional requirements give rise to the aircraft system 
requirements. Once die requirements for the aircraft systems me defined, die flight deck requirements are developed. 
Generally, the flight deck is not considered until die end of the design process. Human factors experts are often 
brought in to ‘human factor’ the flight deck design, as if diere was a well established procedure for doing so, similar 
to Tuggedizing hardware’ or ‘soundproofing die cabin’. Any problems that cannot be ‘human factored’ in design can 
be addressed widi aggressive training of die flight crew. 

The fallacy in this approach is considering human factors to be a methodology or science similar to ruggedizing 
(e.g. 9 structural mechanics and dynamics) or sound proofing (e.g, acoustics). It is not similar. First, human factors 
is not a discipline that retrofits well. In die case of aircraft, when the system functions mid the flight control modes 
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have already been defined, major design decisions that affect the huinan-centeredness have already been made. In other 
words, there may be features in the design that dispose human s to error and no amount of display change or training 
will nullify that disposition. The second difference between areas such as acoustics and human factors is that there is 
no established set of human factors tools and principles that will generate a repeatable and consistent design. There 
are some conventions for tilings such as color, reach, legibility, etc., and a few for cognitive aspects, such as 
involvement, awareness, and human/automation interaction, but there is still considerable debate in the human 
factors community over standards and procedures. This lack of maturity is not due to the age of the field, but rather 
the difficulty of the subject matter, namely understanding humans. Human beings are incredibly complex, 
apparently non-deterministic entities. Designing systems to interact with humans is extremely difficult. 

What often saves potentially bad designs is the fact that humans are indeed adaptable, flexible, and diligent. 
While a large number of accidents are attributed to human error, there are no data on the number of accidents averted 
through human intervention. While it is true that To err is human’, it is also true that 'Humanity covers a 
multitude of design sins’. In fact, one of the primary reasons for including humans in the system is to take 
advantage of their adaptability and creativity. Humans make the system work, and at this point in the maturity of 
technology, humans are essential. 

At this point in the discussion an interesting irony emerges. On one hand, the flight crew appears to be a 
critical link in the chain of both averting and causing accidents. On the other hand, the design of the flight deck is 
left to the end of the design process where there is little flexibility remaining to accommodate the human. 

There are a number of valid arguments for the traditional approach: (1) Humans are flexible and creative so they 
can handle less-than-optimal designs. (2) The current approach has produced certified designs and a change would 
involve more risk. (3) Designing for the human is too ill-defined a process («?.#., there are no Navier-Stokes 
equations for human beings) — designers should perform die defined, procedural design tasks first. (4) The systems 
must be defined before the system controls in die flight deck can be defined (Le. t put die horse before die cart). 
However, diere are compelling counterpoints to these arguments: (1) While humans are flexible, the complexity of 
the flight mission, not die flight deck design, should exploit that flexibility. (2) Because the human is so critical in 
the aversion and cause of accidents, the most fertile ground for accident reduction may be found in addressing the 
human element of die aircraft more directly. While the risk of such an approach may be great, the risk of allowing 
the accident rate to continue as it is may be greater. (3) Sometimes it is better to tackle die more ill defined 
problems first so that they can receive more effort, and postpone working on the ‘easier’ problems. (4) The order of 
design may be more like a chicken and egg issue rather than a horse and cart issue (i.e., one set of design constraints 
does not necessarily beget die other). 

The approach advocated in this paper (Figure 2) is to begin die aircraft design widi the mission requirements, 
but from the mission requirements define the roles and responsibilities for the flight crew. Then a flight deck 
functional concept can be developed. From diis concept, system and airframe design cmi proceed. The more difficult 
task of designing for humans is faced at die beginning of die design process, and the more tractable and procedural 
processes of designing for aerodynamics, materials, and propulsion are left to the end. In this design, die flight deck 
conforms to the human, and the aircraft conforms to die flight deck. What does it mean for the flight deck and 
aircraft to conform to the human? A simple description is having an aircraft that is natural to use. Therefore, the 
Wings design concept looks to nature to provide die blueprint for design, namely the body metaphor. 


FUNCTION ALLOCATION: THE BODY METAPHOR 

In the design of modem aircraft it is critical to address die allocation of functions to humans and automation. 
There are a number of taxonomies mid categories for describing function allocation in design (Palmer, e.L al 1995, 
Billings 1991, Riley 1989, Rogers 1996). Most of these studies characterize different levels of allocation between 
human and machine, ranging from total allocation to the human to total allocation to machine. In most design 
decisions, these extremes me not used. Rather, there is a shared allocation of responsibilities between human mid 
machine for all functions (Rogers, 1996). Further, different functions require different function allocation strategies 
and the allocation for one function may influence the required allocation for another. For example, how a particular 
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function ( e.g ., hydraulics system management) is allocated between die human mid die machine can have 
consequences for the allocation of another function (e.g., gear mid high lift device control). This interdependence of 
allocation strategies can make die holistic design of mi aircraft a difficult task. The key is to have a predetermined 
allocation strategy before die allocation process. The Wings concept looks to nature to provide such a strategy. The 
strategy is to base allocation decisions on die natural allocation of functions between the mind and the body. The 
mind/body and human/aircraft relationships are virtually analogous. The mind cannot move by itself, the human 
cannot fly. The mind cannot sense the outside world, rather it relies on sensors (e.g., eyes, ears, skin) to sense 
information from die outside world and from die body itself. Likewise, the human in an aircraft often must depend 
on sensors to provide information regarding the outside world. The mind controls much of die body’s functions, but 
often only in coarse ways. These coarse commands are interpreted into tine motor performance using reflexive 
muscle responses in the body (e.g., the reflexive bending of the ankle while walking). Likewise, the aircraft often 
has distributed mechanisms that interpret general commands and perform mechanical responses (e.g., yaw dampers). 
In the Wings design concept, the appropriate level of automation for an aircraft function is determined by die level 
allocated to its’ analog in the human body. Systems like fuel pumps and fuel filters would function autonomously 
like their analogs, the heart and liver. Ail higher level functions would be initiated by die human, just as die mind 
initiates all gross motor actions. The human would be at die ‘head’ of die aircraft, and therefore should have fewer 
surprises. 

The Wings design concept uses a mind-centered, body -metaphor approach to automation, keeping the mind at 
die center of and as the initiator of all major activities of die system. The automation serves to augment mid 
enhance the user in performing those activities. A major advantage of this allocation strategy is that design can 
focus on overcoming human error problems diat are d uly human, such as wandering attention and poor 
understanding of die mission, rather than problems that have arisen from unnatural function allocation. In other 
words, there are problems mid en*ors intrinsic to human nature that would occur in any domain and there are problems 
that result from human interaction widi a design or interface. These two classes of problems may require different 
remedies and solution approaches. By making the aircraft design similar to that of die human body, the second class 
of problems may be subsumed by die first and require only one type of remedy. Another advantage of the mind- 
centered, body -metaphor approach is that die human mind already has several efficient preprogrammed routines for 
dealing widi mid operating the body. These natural routines could be exploited to deal widi die vehicle so that 
additional routines would not have to be developed. Finally, the body metaphor for design otters less risk than other 
untried design methodologies in that it has been proven by the process of evolution. 

How does this design strategy compare widi that of modem flight decks? Characters from two movies, 
RoboCop™ and Star Wars™, exemplify die two design concepts. In RoboCop™, the title character is a human 
mind augmented by an integrated human-machine. All major actions of die system are controlled by die human 
mind. There is significant augmentation to the normal human skills (bodi physical and mental). Intent, style, mid 
ingenuity originate from die mind while strength, precision, skill, mid sensing are enhanced by the automation at the 
mind’s command. RoboCop™ could be considered to be a product of the Wings design concept. On the other hand, 
R2D2 of Star Wars™ represents the product of a more traditional design strategy — an intelligent associate. 

Although a human commands R2D2, the execution of diese commands is based on R2D2’s programmer’s 
interpretation. Because these commands are often carried out at a later time or place, die human may not be able to 
monitor the associate. Consequently, the associate may do what the human commanded, but not what he intended. 

In modem flight decks, the flight management/autoflight system acts as an intelligent associate. It is given a series 
of commands by die human and it dien goes off and acts on those commands. It is ti ne, that the human can take 
over any task at any time, but what happens when the human is inattentive or unaware of all the details of how the 
automation is programmed? We often see errors occur, especially if the automation is programmed using a logic that 
is different from the human’s logic. 


COMPLEMENTARY AND INTERPRETATIVE DESIGN 

The human body relates to die mind in two ways. The body complements the mind and interprets for the mind. 
The body complements the mind by allowing it to do things that it alone cannot do. The mind cannot move, 
manipulate objects, or survive on its own. The body provides functions allowing die mind to do these things. It 
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provides a life support system and a protection system for the mind. Also, the body interprets various signals or 
stimuli from the outside world into a form that the mind is equipped to deal with. The body translates sound, light, 
touch, pressure, and chemical content into electrical signals used by the mind. The body also collects information 
regarding the status of itself and communicates that to the mind. The body interprets its’ status to die mind when 
something is damaged (pain), is not functioning properly (numbness), or is operating correctly (muscle sense). 
Finally, the body executes commands from die inind by interpreting those signals into muscle movements. The 
concept of complementing and interpreting is not new to aircraft and flight deck design. Indeed, people would not be 
able to fly if it were not for these two functions in modern aircraft. The difference between the Wings design concept 
and others is that it seeks to design a complementary mid interpretive flight deck that is mind-centered using a 
function allocation strategy that is based on the body metaphor. 

It is important to note that the body metaphor is meant to be a template for function allocation, but not a 
limitation on design. This is especially true when considering die complementary aspects of design. The design of 
die human body does not allow the human to see behind him without moving die body around. However, die 
aircraft design might allow for vision in 360 degrees mound die x, y, mid z axes. This design decision is consistent 
with the Wings design concept (e.g., eyes in the back of your head). Likewise, the aircraft design can be used to 
complement human deficiencies in areas such as memory, attention, mid even reasoning strategies. But the metaphor 
should be kept in mind as new functions are implemented. Thus die designer wanting to add a new complementary 
functionality that humans do not have, should imagine what it would be like if humans had evolved with such 
capabilities. Humans do not have wings, but what would it be like if they did? 

Complementary Design 

The aircraft design should complement die human by assisting in die avoidance of human errors and in 
performing the mission. The former can include sensing mechanisms, memory aids, mid computational tools. An 
exciting area for complementing die human is reasoning strategies, e.g. t helping the crew know when to shift from 
their natural reasoning strategy, say goal-driven, to another strategy, say data-driven. It important to note, dial die 
body metaphor does not eliminate human error, it eliminates human/machine interaction error. Complementary 
design must be used to address true human error. 

Complementing die human for die mission, would include providing all the information mid capabilities 
necessary to perform die mission safely and efficiently. The Wings concept prescribes complementing as if humans 
were bom to fly — as we are now bom to walk. This requires distributing control mechanisms for Hying throughout 
the aircraft, just as many of die control mechanisms for walking (e.g., balance, muscle movements, muscle 
coordination) are distributed diroughout our bodies. 


Interpretive Design 

The aircraft should interpret the human commands to die aircraft mid interpret phenomena from the outside world 
to die human in a meaningful mid manageable fashion. The direct control of individual systems should be deliberate 
and at a coarse or high level (/.<?., more ‘what’ than ‘how’). Humans naturally know how to lift dieir hands and 
never confuse them with their feet. The human does not need to consciously diink about the fine details of how arm 
movement commands are carried out. The details are not as important as the explicitness of die command. Such 
designs are called hermeneutic by Hollnagel (1991) and transparent by Winograd ( 1987). The level of detail in both 
the information mid control provided by die aircraft should be directly dependent on die task (Abbott 1989). In 
interpreting information from the outside world, die design should use the body metaphor as well. For example, 
tactile information such as vibration might be presented in a tactile manner, say vibrating a control (similar to what 
a stickshaker does today) or even die pilot’s seat. 

Often the human is overloaded on a particular interface channel mid cannot receive or present information using 
it. This does not mean that the information cannot be presented, but rather that its content should be presented in 
the most natural way on another channel. As an example, consider modem methods of communicating with the 
deaf. The most common form of communication is American Sign Language (ASL). AST is actually a different 
language from say, English or German. If die deaf person could hem* at one time, he will have to learn the new 
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language and translate it into his first language. An alternative to ASL is Cued Speech (Fleetwood & Metzger 
1997). In Cued Speech, the ‘speaker’ simply represents phonemes (/.<?., sounds) using hand and mouth gestures. 
Thus the cuer can communicate in English, German, or Spanish. The ‘hearer’ does not have to learn a new 
language, just a new way of hearing. This is an example of presenting the same information over a different 
channel. It may be that this technique could make use of underloaded channels to send and receive information that 
cannot be transmitted over the channel of choice either because it is already loaded or is not amenable to presenting 
the information. An example of this in flight deck design might be to transmit the feeling of ‘numbness’ visually 
or aurally to let the pilot know that a certain sensor or suite of sensors has failed. Of course, one must be careful 
not to overload the human with too much information. Obviously much basic research is required to explore these 
possibilities. However, die possibilities are intriguing. 

When Complementary and Interpretive Conflict 

There are times in the design process where tradeoffs must be made between complementing and interpreting. 

For example, it may be more appropriate to use nonintuitive logic because it is more efficient. Or, it may be that 
the complementary aspect of the design simply has no analog in the human mental repertoire. In the first case — 
deliberate departure from die way humans naturally think about things — die designer must lake great care to provide 
extraordinary measures to assist die flight crew in dealing widi an unnatural system. This help can come in die form 
of on-line explanation, memory aids, and ultra-obvious interfaces (Norman’s affordances 1989). Training is also an 
important part of assisting die human. However, in this case, training requires die user to learn and remember 
something that is unnatural, thereby increasing the opportunity for error. Flight crew performance of an unnatural 
task is better handled in design. Training is more appropriate for die second case, where the human is being taught 
something that is new to his nature but not necessarily contrary to it. The more important of these areas are the 
fundamentals and physics of flight. Since humans do not naturally tty, they must be taught these principles. There 
are many that argue that piloting an aircraft should be as easy as driving a car. However, by the time most people 
are ready to drive a car, diey have had ten to fifteen years of experience in negotiating in a ‘two dimensional 9 
environment. A three-year old instinctively knows to lean into a turn as she runs. Driving a cm* is just a small 
extrapolation from our walking experience. But three-dimensional, aerodynamic negotiation is not in our nature. 
Some of its properties can be discovered in activities like underwater swimming, but even here the nature of 
buoyancy prevents us from having mi accurate model. So, even for an aircraft designed using die Wings concept, 
humans must learn how to fly. Hie design process allows die pilot to avoid having to learn things that have 
nothing to do with flight or the mission. 


CONCLUSIONS 

If humans were meant to fly, we would have more than just wings. We would have an internal navigation 
system, we would have legs capable of landings, takeoffs, and aerodynamic concealment, mid we would have die 
knowledge of flight instinctively. We have found that we can overcome diese deficiencies. We have done so by 
brute force based on die advances of technology. The Wings design concept is revolutionary in die original sense of 
the word. It is completing the circuit to die way nature might have meant for us to fly. 

It should be noted that the author is not recommending this approach for every aircraft design. Economics may 
prevent an aircraft of diis type from being built in die present day because it may require an airframe and systems 
design which are too expensive to build. However, such a design could serve as a goal for the technological 
evolution of flight deck and aircraft design. But first, it must be implemented, if only as a test case, to see if it has 
value in die areas of safety mid efficiency. 
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Figure 1. Simplified representation of tire flight deck design process. 



Figure 2: The Wings flight deck design process 
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